A method includes receiving, from a device, (i) a certificate request for a certification authority and (ii) a first digital certificate. The certificate request is digitally signed by the first device, and the first digital certificate is stored in the device. The method also includes verifying, at the certification authority, the first digital certificate using a second digital certificate of another certification authority. The method further includes verifying a digital signature of the certificate request using the first digital certificate. In addition, the method includes, after verifying the first digital certificate and the digital signature, transmitting a second digital certificate to the device.
Legal claims defining the scope of protection, as filed with the USPTO.
1. A method comprising: receiving, from a device, (i) a certificate request for a certification authority and (ii) a first digital certificate, wherein the certificate request is digitally signed by the first device and the first digital certificate is stored in the device; verifying, at the certification authority, the first digital certificate using a second digital certificate of another certification authority; verifying a digital signature of the certificate request using the first digital certificate; after verifying the first digital certificate and the digital signature, transmitting a second digital certificate to the device; wherein the first digital certificate comprises a digital certificate issued by the other certification authority that is associated with a manufacturer of the device; and wherein the second digital certificate comprises a digital certificate issued by the certification authority that is associated with a customer installing or using the device.
2. The method of claim 1 , further comprising: obtaining a unique identifier associated with the device; and determining whether the unique identifier is contained in a whitelist of the certification authority; wherein the second digital certificate is transmitted to the device after determining that the unique identifier is contained in the whitelist.
3. The method of claim 2 , wherein the unique identifier comprises a serial number, a medium access control (MAC) address, or an Internet Protocol (IP) address of the device.
4. The method of claim 2 , further comprising: receiving multiple unique identifiers; and placing the multiple unique identifiers in the whitelist.
5. The method of claim 2 , wherein: the unique identifier comprises at least one of: a serial number and an Internet Protocol (IP) address of the device.
6. An apparatus configured to provide a certification authority, the apparatus comprising: at least one memory configured to store a first digital certificate; at least one processor configured to: receive, from a device, (i) a certificate request for the certification authority and (ii) the first digital certificate, wherein the certificate request is digitally signed by the first device and the first digital certificate is stored in the device; verify the first digital certificate using a second digital certificate of another certification authority; verify a digital signature of the certificate request using the first digital certificate; and after verifying the first digital certificate and the digital signature, initiate transmission of a second digital certificate to the device, wherein: the first digital certificate comprises a digital certificate issued by the other certification authority that is associated with a manufacturer of the device; and the second digital certificate comprises a digital certificate issued by the certification authority that is associated with a customer installing or using the device.
7. The apparatus of claim 6 , wherein: the at least one processor is further configured to: obtain a unique identifier associated with the device; and determine whether the unique identifier is contained in a whitelist of the certification authority; and the at least one processor is configured to initiate transmission of the second digital certificate to the device after determining that the unique identifier is contained in the whitelist.
8. The apparatus of claim 7 , wherein the unique identifier comprises a serial number, a medium access control (MAC) address, or an Internet Protocol (IP) address of the device.
9. The apparatus of claim 7 , wherein the at least one processor is further configured to: receive multiple unique identifiers; and place the multiple unique identifiers in the whitelist.
10. The apparatus of claim 7 , wherein: the unique identifier comprises a medium access control (MAC) address and an Internet Protocol (IP) address of the device.
11. A method comprising: generating a key pair having first and second keys associated with a device; generating a certificate request associated with the key pair; digitally signing the certificate request; transmitting the certificate request and a first digital certificate stored in the device to a certification authority; and in response to the certification authority verifying the first digital certificate and a digital signature of the certificate request, receiving a second digital certificate from the certification authority and storing the second digital certificate in the device; wherein the first digital certificate comprises a digital certificate issued by the other certification authority that is associated with a manufacturer of the device; and wherein the second digital certificate comprises a digital certificate issued by the certification authority that is associated with a customer installing or using the device.
12. The method of claim 11 , wherein: the certificate request is digitally signed using a third key; and the third key comprises a private or secret key associated with the first digital certificate.
13. The method of claim 11 , wherein the second digital certificate is received from the certification authority without the device providing a password to the certification authority.
14. The method of claim 11 , wherein the first digital certificate comprises a digital certificate issued by another certification authority that is associated with a manufacturer of the device.
15. The method of claim 11 , wherein the second digital certificate comprises a digital certificate issued by the certification authority during installation of the device in a system.
16. An apparatus comprising: at least one memory configured to store a first digital certificate; and at least one processor configured to: generate a key pair having first and second keys associated with the apparatus; generate a certificate request associated with the key pair; digitally sign the certificate request; initiate transmission of the certificate request and the first digital certificate to a certification authority; and in response to the certification authority verifying the first digital certificate and a digital signature of the certificate request, receive a second digital certificate from the certification authority and store the second digital certificate in the at least one memory; wherein the first digital certificate comprises a digital certificate issued by the other certification authority that is associated with a manufacturer of the device; and wherein the second digital certificate comprises a digital certificate issued by the certification authority that is associated with a customer installing or using the device.
17. The apparatus of claim 16 , wherein: the at least one processor is configured to digitally sign the certificate request using a third key; and the third key comprises a private or secret key associated with the first digital certificate.
18. The apparatus of claim 16 , wherein the at least one processor is configured to receive the second digital certificate from the certification authority without providing a password to the certification authority.
19. The apparatus of claim 16 , wherein the at least one processor is further configured to: obtain a unique identifier associated with the device; and determine whether the unique identifier is contained in a whitelist of the certification authority; wherein the second digital certificate is transmitted to the device after determining that the unique identifier is contained in the whitelist.
20. The apparatus of claim 19 , wherein the unique identifier comprises at least one of: a serial number, a medium access control (MAC) address, and an Internet Protocol (IP) address of the device.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
February 7, 2018
August 18, 2020
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.